Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: UXAVVZVjdaWo8V7w70pgIiaSuUyJvYVn2DWDHGhGr3g=
Subject key identifier: A5:B3:DA:EE:5A:0B:E2:51:CC:EA:6D:34:75:E6:21:B4:1F:82:ED:62
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019D99626441495C5F9B024777BB2C05DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0FA6
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: QvY06MnnqJkM7p+E7LVA+APp4U/LuCZJbv1HvPst8SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:64:41:49:5c:5f:9b:02:47:77:bb:2c:05:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=a5b3daee5a0be251ccea6d3475e621b41f82ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:17:0a:ea:e3:a1:3d:91:09:fd:9c:ae:13:
f8:d2:96:b5:01:3e:c4:5c:28:c7:12:d9:b3:f1:4f:
ab:d1:28:6c:8d:2d:64:28:fd:fb:40:dd:cc:78:2f:
87:55:3d:83:4c:f1:3f:10:b7:1b:7f:7c:e1:85:f8:
c3:8c:8e:2e:76:b6:39:9b:df:f7:7b:76:f1:79:32:
8c:bd:b2:eb:31:80:58:1b:76:62:0f:e3:5d:d1:79:
08:98:17:f4:b9:5b:de:2b:32:e0:66:a9:04:62:89:
d4:c2:b8:39:71:74:17:0f:0e:c0:f7:dc:e3:a4:dc:
41:23:f1:68:61:80:aa:c6:43:af:73:f4:4d:5c:3f:
e1:b8:44:58:58:75:cc:38:23:b6:78:44:38:89:a5:
e0:fa:ca:b2:d2:23:3d:9b:5e:f8:ae:a4:7e:72:45:
0b:e8:fa:86:71:d8:5a:6c:37:0e:d3:04:9a:5b:13:
99:1f:9a:63:c2:eb:ce:34:1a:44:6e:8c:4d:30:ee:
cd:ef:20:a0:fa:4d:45:b3:cc:56:f2:5d:dc:5b:92:
ae:b4:d2:08:1b:ea:80:a5:9b:63:e2:b4:ba:49:4e:
95:66:35:c5:b3:2d:7b:b7:74:cd:87:fb:4a:95:66:
7b:61:28:ba:92:d3:60:45:35:e7:ea:9e:dc:f8:73:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:DA:EE:5A:0B:E2:51:CC:EA:6D:34:75:E6:21:B4:1F:82:ED:62
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0b:77:f4:54:16:f9:3d:f7:f4:3d:32:86:3f:b7:09:2b:5c:
f4:5d:d1:f5:06:32:db:db:55:41:eb:7d:44:ec:51:66:80:39:
fa:0c:02:c8:56:11:02:49:e3:08:d5:01:dc:8f:8d:3a:fd:94:
61:fb:27:42:59:a5:87:91:2b:8d:93:6c:c4:d3:97:36:52:d8:
d5:ab:bf:66:b8:c7:85:4b:cc:f3:56:46:d0:d4:c9:2c:a7:c5:
1a:41:29:14:d7:cc:97:f7:9e:7c:f0:07:1a:f9:72:d3:0b:ae:
7c:09:42:22:67:43:66:80:7c:54:72:06:34:e2:be:ac:df:89:
cf:a8:5f:0b:72:8f:c3:3c:12:fe:aa:53:74:eb:13:44:05:75:
01:63:20:f7:1f:77:22:37:f2:b9:da:00:bd:9a:67:ff:24:2f:
05:ca:5f:24:2e:63:c2:14:1b:48:ff:fd:4e:6b:14:8c:5f:b6:
35:21:cf:b2:7d:66:5c:fe:70:72:cc:8b:53:fa:34:0e:81:4f:
f9:8e:5c:c1:76:23:22:0a:36:67:7b:65:67:10:0f:46:af:37:
e5:34:d8:5f:b8:82:28:42:c5:ce:a7:a0:be:1c:38:99:f4:fa:
3c:32:06:77:bb:c3:57:68:c5:b6:e7:03:f1:f3:73:43:39:d6:
24:38:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:57 2026 by rpki-client